Lucene search
K

CVE-2026-42810 Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names

šŸ—“ļøĀ 04 May 2026Ā 16:48:49Reported byĀ apacheTypeĀ 
cvelist
Ā cvelist
šŸ”—Ā www.cve.orgšŸ‘Ā 24Ā Views

Polaris S3 delegation via wildcard table names enables cross-table access to metadata and data.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-42810
4 May 202616:48
–attackerkb
Circl
CVE-2026-42810
4 May 202618:01
–circl
CNNVD
Apache Polaris č¾“å…„éŖŒčÆé”™čÆÆę¼ę“ž
4 May 202600:00
–cnnvd
CVE
CVE-2026-42810
4 May 202616:48
–cve
EUVD
EUVD-2026-27035
4 May 202616:48
–euvd
Github Security Blog
Apache Polaris has an Improper Input Validation Issue
4 May 202618:30
–github
NVD
CVE-2026-42810
4 May 202617:16
–nvd
OSV
GHSA-VXGG-MQX2-3W59 Apache Polaris has an Improper Input Validation Issue
4 May 202618:30
–osv
Positive Technologies
PT-2026-36669
2 May 202600:00
–ptsecurity
Snyk
Improper Encoding or Escaping of Output
4 May 202618:26
–snyk
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Polaris",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation